Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
File:                     d6U9LpdwTb6oMaZEAHKQTukacbA.mft (raw, json)
Hash identifier:          dxPZi73Eg5/eKITKVEkaJKoyatTrrUFCeyi8ODUiWlk=
Subject key identifier:   2E:E7:6A:7F:95:90:61:9E:8B:0F:D1:5E:DE:D0:45:3F:12:74:7E:92
Authority key identifier: 77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0
Certificate issuer:       /CN=77a53d2e97704dbea831a6440072904ee91a71b0
Certificate serial:       0199221F3446C4FD870F02DA50F816466BA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
Manifest number:          134E
Signing time:             Sun 07 Sep 2025 03:01:34 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:34 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:34 +0000
Files and hashes:         1: 8YLxHIrqEOpYdEsGGRi0e0TkaqY.roa (hash: ZSlp7CySsW2GetrGVI9UQkRD/3974H3lwSYsXYBiMcM=)
                          2: d6U9LpdwTb6oMaZEAHKQTukacbA.crl (hash: UWzbqTp+N9SSXJfnyBYnPW0v1Zqqhp/Pxt6iCQ3zR4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1f:34:46:c4:fd:87:0f:02:da:50:f8:16:46:6b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a53d2e97704dbea831a6440072904ee91a71b0
        Validity
            Not Before: Sep  7 03:01:34 2025 GMT
            Not After : Sep  8 03:01:34 2025 GMT
        Subject: CN=2ee76a7f9590619e8b0fd15eded0453f12747e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:03:37:9e:be:4d:93:f9:85:a8:02:d4:c3:56:
                    b0:e1:d1:70:14:ec:20:7e:81:44:4d:8d:b4:c0:77:
                    21:5f:e1:3e:38:52:db:ee:f0:79:1f:b3:6a:1e:e5:
                    fd:65:df:5f:51:30:13:1f:a4:04:34:9b:6a:b1:41:
                    db:58:52:f6:3a:78:c9:97:87:cd:8c:d0:58:46:7b:
                    cd:b0:2c:05:d3:ab:5a:37:8c:22:a9:f4:15:90:cc:
                    eb:bf:f2:4e:91:45:64:a8:5a:2e:82:97:bd:00:48:
                    16:17:3e:7c:6d:9d:33:07:0e:3f:a8:77:f3:a4:04:
                    d3:1e:9a:e6:78:ff:3c:99:89:9a:ca:4b:97:77:ae:
                    49:9a:21:26:b1:9a:07:3b:7f:8c:7c:19:f3:42:0c:
                    33:fd:8c:ea:18:d8:d8:9e:b4:a4:db:ee:ec:33:2d:
                    87:d4:26:9b:a0:92:76:75:69:db:e4:41:ba:84:e5:
                    3b:24:5d:bc:cf:c0:6d:3a:e5:25:04:cb:5f:79:83:
                    2e:e0:37:15:90:ed:40:82:a3:17:bb:b7:fb:df:76:
                    94:a0:d4:8f:4e:ec:02:5a:1f:39:27:15:6e:ce:0e:
                    a2:6a:de:6b:0c:df:6b:8a:91:0f:78:76:68:b2:2a:
                    ed:5a:b7:0d:50:83:9a:cf:39:8d:07:d3:ca:e2:00:
                    ce:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E7:6A:7F:95:90:61:9E:8B:0F:D1:5E:DE:D0:45:3F:12:74:7E:92
            X509v3 Authority Key Identifier:
                keyid:77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:dc:ee:2d:a7:51:46:8e:74:d4:02:00:a9:1d:8f:67:ad:e0:
         34:ea:32:fb:d6:da:04:04:4e:89:3d:17:6d:e6:ef:d5:53:81:
         58:b3:97:84:a3:2c:41:89:01:c4:98:4a:87:b7:b6:bc:99:2a:
         28:75:81:7a:2c:33:6b:b2:7c:46:e0:e2:ab:f9:b2:21:a9:b9:
         a1:2e:85:9d:e2:71:df:f2:3e:e2:49:4f:4b:62:5b:44:5c:06:
         a3:bc:d2:61:05:25:61:58:18:48:64:fa:0b:55:a0:c6:b1:3f:
         d3:46:c3:5e:3d:20:0d:e7:ac:97:7a:9f:6f:ac:58:a9:c1:e6:
         47:16:fa:f2:a9:e7:17:df:c2:55:48:4f:6d:81:45:40:40:8e:
         a6:74:f0:f8:6e:85:c9:ec:cb:3c:2c:1e:b0:67:64:ee:2f:17:
         9b:60:52:48:be:3d:7e:cf:8b:ec:88:73:8b:c0:d7:74:93:d1:
         e9:a4:d2:f1:4c:7a:3f:00:30:6e:db:1b:c1:e7:68:77:17:0f:
         6a:29:c2:dc:f2:71:27:0a:98:82:cd:68:2a:cf:7e:96:c9:57:
         fe:14:37:80:b0:87:f2:1a:5d:c2:06:02:13:bb:7f:ed:be:88:
         c2:bb:c5:2c:d7:f1:47:7f:12:88:50:e3:e0:9f:b7:63:4e:bd:
         9d:b4:35:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:52 2025 by rpki-client